Security Advisory

CVE-2026-12749

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 17:05:23

Last updated 2026-09-15 17:05:23

Assigner ibm

CVSS score 6.4

State PUBLISHED

Description

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

← Browse all CVEs View on cve.org ↗